241 matches found
CentOS 5 : xen (CESA-2012:1236)
Updated xen packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
qemu security update
CentOS Errata and Security Advisory CESA-2012:1234 Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...
Important: Red Hat Security Advisory: xen security update
Updated xen packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Important: Red Hat Security Advisory: qemu-kvm security update
Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
qemu-kvm security update
0.12.1.2-2.295.el63.2 - kvm-console-bounds-check-whenever-changing-the-cursor-du.patch bz851257 - Resolves: bz851257 EMBARGOED CVE-2012-3515 qemu/kvm: VT100 emulation vulnerability rhel-6.3.z...
SUSE-SU-2015:0929-1 Security update for kvm
The kvm qemu vt100 emulation was affected by a problem where specific vt100 sequences could have been used by guest users to affect the host. CVE-2012-3515 aka XSA-17. Also a temp file race was fixed. CVE-2012-2652 Security Issue reference: CVE-2012-3515 CVE-2012-2652...
CVE-2011-3515
Technical details about CVE-2011-3515 are not provided in the supplied documents. Monitor for updates; the entries mention Solaris procfs but do not specify affected component/version, impact, or a patch.
CVE-2010-3037
CVE-2010-3037 affects Cisco Unified Videoconferencing (UVC) products (5110/5115 Linux; 3545, 5230 VxWorks; 3527 PRI Gateway; 3522 BRI Gateway; 3515 MCU). The flaw is a remote command-injection in the web interface via the /goform/websXMLAdminRequestCgi.cgi, allowing an authenticated administrator...
CVE-2010-3515
CVE-2010-3515 affects Solaris/OpenSolaris kernels: Solaris 9/10 and OpenSolaris, in the Kernel/Disk Driver. The vulnerability is described as unspecified in the Solaris component, with local access required for exploit and potential impact on availability. The Oracle Oct 2010 CPU advisory and rel...
CVE-2009-3515
CVE-2009-3515 affects d.net CMS, specifically the dnet_admin/index.php component. A directory traversal flaw (via .. in the type parameter) allows remote authenticated administrators to include and execute arbitrary local files. The vulnerability is documented with a CVSSv2 base score of 6.5 (MED...
CVE-2009-3515
Directory traversal vulnerability in dnetadmin/index.php in d.net CMS allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the type parameter...
CVE-2009-3515
creationtimestamp| type| source ---|---|--- 2009-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9312...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving 1 viewer.swf and 2 loadflash.js, a different vulnerability than CVE-2008-3515...
CVE-2008-3515
Multiple cross-site scripting XSS vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving 1 viewer.swf and 2 loadflash.js, a different vulnerability than CVE-2008-3516...
CVE-2008-3515
Adobe Presenter XSS in viewer.swf and loadflash.js (CVE-2008-3515) affects Presenter 6 and 7 before 7.0.1. The vulnerability involves cross-site scripting via unspecified vectors in files generated by Presenter, specifically viewer.swf and loadflash.js. The NVD entry lists a Medium impact (CVSS 2...
CVE-2007-3515
This CVE-2007-3515 entry describes a SQL injection in view_event.php of TotalCalendar 2.402 and earlier, exploitable via the id parameter to allow remote arbitrary SQL execution. The affected component is the view_event.php script; root cause is improper input handling in the query construction. ...
CVE-2006-3515
SQL injection vulnerability in the loginADP function in ajaxp.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username or 2 password parameters...
CVE-2006-3515
SQL injection vulnerability in the loginADP function in ajaxp.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username or 2 password parameters...
CVE-2006-3515
The vulnerability is an SQL injection in AjaxPortal 3.0 affecting the loginADP function in ajaxp.php. Remote attackers can inject via the (username) or (password) parameters to execute arbitrary SQL and bypass authentication. Documents do not provide patch/version details or explicit mitigations....